Zeek(used to be Bro) is an open-source Network Security Monitor that can be used for Detection System and network traffic analysis framework. Zeek can generate real-time alerts, data logging for further investigation, and automatic program execution ...

This post is a continuation of Part 1 - Evaluating Security Stack Resilience against Attack use cases - a suggested framework. The following photos will show some of the use cases (or playbooks) that demonstrate how Mandiant Security Validation (MSV)...